Securite

[EthanThePhoenix38]

No description provided.

[EthanThePhoenix38]

@copilot corrige ce qui passse pas

[Copilot]

@EthanThePhoenix38 I've opened a new pull request, #73, to work on those changes. Once the pull request is ready, I'll request review from you.

[Copilot]

Pull request overview

Updates JavaScript dependencies as part of an automated security batch, including a jsdom major-version bump, and records those automated updates in the changelog.

Changes:

• Bump axios from ^1.13.4 to ^1.13.5.
• Bump jsdom from ^27.4.0 to ^28.0.0 (and refresh related transitive lockfile entries).
• Append multiple “Automated Security Batch Update” entries across several versions in CHANGELOG.md.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 4 comments.

File	Description
package.json	Updates direct dependency versions (axios, jsdom).
package-lock.json	Updates resolved versions / integrity hashes and transitive dependency graph for the bumped packages.
CHANGELOG.md	Adds repeated automated security batch update log lines under multiple release sections.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Bumping jsdom to v28 raises the effective minimum Node.js version (package-lock shows jsdom requires "node": "^20.19.0 || ^22.12.0 || >=24.0.0", and isomorphic-dompurify requires >=20.19.5). However, this repo’s package.json engines still allows ">=20.0.0", which can lead to installs/runs on Node 20.0–20.18 that will fail dependency engine checks. Align the engines.node range with the strictest dependency requirement (and ensure CI/runtime uses that version).

[Copilot]

These DependabotSecureFlow entries are duplicated and appear under a release section dated earlier (v1.1.0 is 2026-01-31, but the entries are 2026-02-xx). This makes the changelog misleading and noisy. Consider deduplicating and moving automated security-update logs into an "Unreleased" section or into the correct released version entry only once.

[Copilot]

This block repeats the same automated security batch update lines already listed in other versions. Changelog entries should describe changes specific to this release; please remove duplicates and keep the security update note in a single appropriate section (e.g., Unreleased or the actual version containing the dependency bumps).

[Copilot]

This section for v1.0.0 now contains repeated 2026-02-xx automated security-update entries, which are unrelated to the initial 2025-12-10 release and duplicate notes elsewhere. Please remove these duplicates and keep security update notes scoped to the version(s) where the dependency changes occurred.

Suggested change

	- **2026-02-09 06:35 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-09 06:34 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-09 06:33 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-09 06:33 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-09 06:33 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-06 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-06 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-06 06:16 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-04 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-04 06:17 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-03 07:59 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-02 06:36 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-02 06:35 UTC**: Automated Security Batch Update (DependabotSecureFlow)
	- **2026-02-02 06:34 UTC**: Automated Security Batch Update (DependabotSecureFlow)